Skip to content
OpenAdvisories

Vendor

BuddhaThemes

7 known vulnerabilities.

Products

WeDesignTech Ultimate Booking Addon 2 Neo | Barber Shop WordPress Theme 1 Lizza LMS Pro 1 HYDRO 1 ColorFolio 1 ColorFolio - Freelance Designer WordPress Theme 1
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 8.8
    CVE-2026-94065

    WordPress ColorFolio theme <= 1.3 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in BuddhaThemes ColorFolio colorit allows Object Injection.This issue affects ColorFolio: from n/a through 1.3.

    BuddhaThemes ColorFolio
  • High 8.8
    CVE-2026-94064

    WordPress Neo | Barber Shop WordPress Theme theme <= 3.5 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in BuddhaThemes Neo | Barber Shop WordPress Theme neocut allows Object Injection.This issue affects Neo | Barber Shop WordPress Theme: from n/a through 3.5.

    BuddhaThemes Neo | Barber Shop WordPress Theme Web / CMS
  • High 8.1
    CVE-2026-27096

    WordPress ColorFolio - Freelance Designer WordPress Theme theme <= 1.3 - Deserialization of untrusted data vulnerability

    Deserialization of Untrusted Data vulnerability in BuddhaThemes ColorFolio - Freelance Designer WordPress Theme allows Object Injection.This issue affects ColorFolio - Freelance Designer WordPress Theme: from n/a through 1.3.

    BuddhaThemes ColorFolio - Freelance Designer WordPress Theme Web / CMS
  • High 7.5
    CVE-2025-69340

    WordPress WeDesignTech Ultimate Booking Addon plugin <= 1.0.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in BuddhaThemes WeDesignTech Ultimate Booking Addon wedesigntech-ultimate-booking-addon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WeDesignTech Ultimate Booking Addon: from n/…

    BuddhaThemes WeDesignTech Ultimate Booking Addon
  • High 7.1
    CVE-2025-31428

    WordPress HYDRO theme <= 2.8 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BuddhaThemes HYDRO hydro allows Reflected XSS.This issue affects HYDRO: from n/a through <= 2.8.

    BuddhaThemes HYDRO